Last updated August 6, 2026
Privacy Notice
This notice explains what WorkPyro collects, why we use it, who processes it, and the choices you have.
1. Who is responsible
VENSIO AS is responsible for the processing described in this notice.
Organization number: 936 978 517
Postal address: Kaldslettneset 8, 9020 Tromsdalen, Norway
Privacy questions and requests can be sent to support@workpyro.com.
2. Information we collect
Account data includes your email address, name, authentication details, security events, language, and account status.
Career data includes your CV, education, work history, skills, personal context, job postings, applications, interview material, and the preferences you choose to save.
Service data includes AI requests and responses, Pyro usage, payment and entitlement records, email delivery events, waitlist preferences, rate-limit data, and technical logs such as timestamps, IP addresses, and browser or device information.
3. Why we use the information
We use account and career data to provide the features you ask for, secure your account, calculate Pyro use, process purchases, and respond to support requests. This processing is needed to provide the service under our agreement with you.
We use security, delivery, and technical records to prevent abuse, investigate failures, keep the service reliable, and protect users. We rely on our legitimate interests for this work and limit the information to what is needed for those purposes.
We keep payment and accounting records when the law requires it. We send marketing email only when you have opted in or another documented legal basis applies. You can withdraw a marketing opt-in at any time.
4. AI processing
When you use an AI feature, the relevant CV, job, application, conversation, or profile context is sent to the AI provider selected for that task. WorkPyro currently supports Anthropic and OpenAI. Do not add sensitive information that is not needed for the result you want. AI output can be wrong, so review it before using it.
5. Service providers
We use service providers to run WorkPyro. These include Supabase for authentication and databases, Vercel for hosting, Anthropic and OpenAI for AI features, Stripe for payments, Resend for email, and Upstash for rate limiting. These providers process information under their applicable service and data-processing terms.
6. International transfers
Some providers may process information outside Norway or the European Economic Area. Where required, transfers rely on an adequacy decision, approved contractual safeguards, or another lawful transfer mechanism. Contact us if you want information about the safeguards used for a particular provider.
7. Retention and deletion
Account content is kept while your account is active. An account with no recorded activity for 365 days is deleted only after at least 30 days' warning. A deletion you request has a 90-day reactivation period.
Email delivery logs are kept for up to 24 months and raw Resend webhook receipts for up to 90 days. Operational logs and backups expire on shorter provider schedules where practical. Payment, accounting, fraud, dispute, and security records may be kept longer when the law or a documented need requires it.
8. Your rights
Depending on the situation, you may ask for access, correction, deletion, restriction, or a portable copy of your personal data. You may object to processing based on legitimate interests and withdraw consent without affecting earlier lawful processing. We may need to verify your identity before completing a request.
You may also complain to the Norwegian Data Protection Authority, Datatilsynet, or the supervisory authority where you live or work.
9. Cookies
WorkPyro uses cookies and browser storage needed for authentication, security, and core application behavior.
10. Changes
We will update the date above when this notice changes. If a change materially affects how existing account data is used, we will provide an additional notice where appropriate.